Documentation Center
AlienVault® USM Anywhere™

Assigning AlienVault Agent Configuration Profiles

  Role Availability   Read-Only   Analyst   Manager

USM Anywhere includes out-of-the-box agent configuration profiles to manage the queries that it runs for an assetAn IP-addressable host, including but not limited to network devices, virtual servers, and physical servers. associated with a deployed AlienVault Agent. For each profile, you can view the list of queries, along with a description of the collected logs and the query frequency. Depending on your needs, you can change the default profile so that you will be collecting the log data and generating the eventsAny traffic or data exchange detected by AlienVault products through a Sensor, or through external devices such as a firewall. that you need for newly deployed agents.

USM Anywhere provides two configuration profiles for each of the AlienVault Agent deployment types. See Managing AlienVault Agent Profiles for further information.

To display the Agent Configuration Profiles

  1. Go to DATA SOURCES > AGENTS and click the Configuration Profiles tab.
  2. Agent Configuration Profiles

  3. Select the configuration profile you want by default.

Note: You can display the name of the used queries and the file integrity of each profile if you click on the specific profile. See Managing AlienVault Agent Profiles for further information.

Assigning AlienVault Agent Configuration Profiles to Assets

To assign a specific agent configuration profile to an asset from the Assets list view

  1. Go to ENVIRONMENT > ASSETS.
  2. Search the asset and click Actions > Assign Agent Profile to open the Configure Assets popup window.
  3. Choose the agent profile you want to assign to the selected asset.
  4. Configure Assets popup window

    Note: USM Anywhere will display an informative message if assets exist which do not have agents deployed.

  5. Click Save.

To assign a specific agent configuration profile to an asset from the details of an asset

  1. Go to ENVIRONMENT > ASSETS.
  2. Search the asset, click the blue chevron icon () located next to the asset name you want to assign to the specific agent configuration profile and select Full Details.
  3. Click the Agent tab.
  4. Click the Configuration Profile combo and select the profile you want to assign.
  5. Details of an asset

Assigning AlienVault Agent Configuration Profiles to Asset Groups

  1. Go to ENVIRONMENT > ASSET GROUPS.
  2. Click the blue chevron icon () located next to the asset group name you want to assign the profile and select Full Details.
  3. Click Actions > Assign Agent Profile to open the Configure Asset Group Members popup window.
  4. Choose the agent profile you want to assign to the selected asset group.
  5. Configure Asset Group Members popup window

  6. Click Save.